diff --git a/.github/workflows/buddy-bot.yml b/.github/workflows/buddy-bot.yml
index 4ed077f..acbf3ad 100644
--- a/.github/workflows/buddy-bot.yml
+++ b/.github/workflows/buddy-bot.yml
@@ -130,7 +130,7 @@ jobs:
 
       - name: Setup PHP and Composer (if needed)
         if: ${{ hashFiles('composer.json') != '' }}
-        uses: shivammathur/setup-php@v2
+        uses: shivammathur/setup-php@2.35.5
         with:
           php-version: '8.4'
           tools: composer
@@ -248,7 +248,7 @@ jobs:
 
       - name: Setup PHP and Composer (if needed)
         if: ${{ hashFiles('composer.json') != '' }}
-        uses: shivammathur/setup-php@v2
+        uses: shivammathur/setup-php@2.35.5
         with:
           php-version: '8.4'
           tools: composer
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d0ab6fe..da7e335 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -21,10 +21,10 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Install Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@v2.0.2
 
       - name: Use cached node_modules
-        uses: actions/cache@v4
+        uses: actions/cache@v4.3.0
         with:
           path: node_modules
           key: node-modules-${{ hashFiles('**/bun.lockb') }}
@@ -44,10 +44,10 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Install Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@v2.0.2
 
       - name: Use cached node_modules
-        uses: actions/cache@v4
+        uses: actions/cache@v4.3.0
         with:
           path: node_modules
           key: node-modules-${{ hashFiles('**/bun.lockb') }}
@@ -67,10 +67,10 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Install Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@v2.0.2
 
       - name: Use cached node_modules
-        uses: actions/cache@v4
+        uses: actions/cache@v4.3.0
         with:
           path: node_modules
           key: node-modules-${{ hashFiles('**/bun.lockb') }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 40e42ee..d362328 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -16,7 +16,7 @@ jobs:
           fetch-depth: 0
 
       - name: Set Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v4.4.0
         with:
           registry-url: 'https://registry.npmjs.org'
 
diff --git a/package.json b/package.json
index af99838..aefdd28 100644
--- a/package.json
+++ b/package.json
@@ -45,22 +45,22 @@
     "typecheck": "bun --bun tsc --noEmit"
   },
   "devDependencies": {
-    "@stacksjs/bumpx": "^0.1.17",
-    "@stacksjs/cli": "^0.70.21",
+    "@stacksjs/bumpx": "^0.1.86",
+    "@stacksjs/cli": "^0.70.23",
     "@stacksjs/eslint-config": "^4.8.2-beta.1",
     "@stacksjs/gitlint": "^0.1.5",
-    "@stacksjs/logging": "^0.70.21",
-    "@stacksjs/logsmith": "^0.1.8",
-    "@stacksjs/storage": "^0.70.21",
-    "@types/bun": "^1.2.8",
+    "@stacksjs/logging": "^0.70.23",
+    "@stacksjs/logsmith": "^0.1.18",
+    "@stacksjs/storage": "^0.70.23",
+    "@types/bun": "^1.2.23",
     "@types/tar": "^6.1.13",
     "buddy-bot": "^0.8.9",
     "bun-git-hooks": "^0.2.19",
-    "bun-plugin-dtsx": "^0.21.9",
+    "bun-plugin-dtsx": "^0.21.12",
     "bunfig": "^0.8.2",
-    "dynamodb-toolbox": "^2.0.0",
-    "tar": "^7.4.3",
-    "typescript": "^5.8.2"
+    "dynamodb-toolbox": "^2.7.1",
+    "tar": "^7.5.1",
+    "typescript": "^5.9.3"
   },
   "git-hooks": {
     "pre-commit": {
diff --git a/pkgx.yaml b/pkgx.yaml
index 66c0649..aa16877 100644
--- a/pkgx.yaml
+++ b/pkgx.yaml
@@ -1,4 +1,4 @@
 dependencies:
-  aws.amazon.com/cli: ^2.15.30
-  bun.sh: ^1.2.5
+  aws.amazon.com/cli: ^2.28.10
+  bun.sh: ^1.2.20
   openjdk.org: ^21.0.3.6